CVE-2021-42375

ADVISORY - nist

Summary

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.

EPSS Score⁠: 0.00061 (0.194)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-159⁠

Improper Handling of Invalid Use of Special Elements

CWE-other⁠

ADVISORY - redhat

CWE-20⁠

Improper Input Validation

Impacted images

Advisories

NIST

CREATED

4 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2021-42375⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CWE-159⁠CWE-other⁠

CVSS SCORE

5.5medium

Alpine

CREATED

4 years ago

UPDATED

4 days ago

ADVISORY IDCVE-2021-42375⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

4 years ago

UPDATED

4 days ago

ADVISORY IDCVE-2021-42375⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

4 years ago

UPDATED

11 months ago

ADVISORY IDCVE-2021-42375⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5low

Red Hat

CREATED

4 years ago

UPDATED

20 days ago

ADVISORY IDCVE-2021-42375⁠

EXPLOITABILITY SCORE

0.5

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

4.1medium